Il Friday 16 May 2008 00:28:44 Ed W ha scritto:
> Giovanni Di Stasi wrote:
> > So,
> > would you implement a server to give a few services (dns, webserver,
> > dhcp, etc.) putting each of these services in a different vserver, just
> > to have a system more secure?
>
> Yes - this is normal practice.
>
> Also it's a piece of cake to copy the vserver to backup before testing
> some new config
>
> > What do you think about having a ssh server in each vserver and not in
> > the main context? Is this setup more secure?
>
> This is normal, however watch out for the ssh in the host nabbing all
> the IPs - set it to run only on the host ips in the config
>
Mmmm... but I don't want to run sshd in the host context at all... had you
understood that?
Received on Thu May 15 23:35:41 2008